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1 


T he following inves tigation was conducted on May 17, 
2007, by SA | | at Baltimore, Maryland: 


SAl 


telephonically contacted 


b6 

b7C 


Klehr, Harrison, Harvey, Branzburg & Ellers LLP, 2 fifl South Broqri 
Street, Philadelphia, PA, 19102, telephone number 


recfdxdina^t he. infor mation his^ law fion nrmd-d^d pertaining to 

G^ddijcL_I^owXedge S^^ems , ^ln cjs Mr. L 


_ advised Aladdin has 

^an o ffice^-fn Chicago'/ iXF inois, but the purchase of the software 
from | ft was conducted by the Aladdin office 

located "in Israel .. 


SAl 


requested that Mr. 


provide the full 


header info rmation for all of th e e-mail communications between 
Aladdin and | | a copy of the software 

downloaded by Aladdin, and any analysis conducted by Aladdin to 
co nfirm that the software downloaded was in fact an illegal copy. 
Mr.| agreed to contact Aladdin regarding these questions. 


b6 

b7C 




\ iVT/nfW. Ni 


^2 — 

5/l7/* b6 


b7C 















FD-340 (Rev. 4-11-03) 


File Number 


• iMrtVhL 


Field Office Acquiring Evidence . 
Serial # of Originating Document 
Date Received iMlm 



(Name of Contributor/Interviewee) 


(Address) 



To Be Returned d Yes 

Receipt Given O Yes 'S Vy No 

Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 

Federal Rules of Criminal Procedure 

□ Yes fSLNo 

Federal Taxpayer Information (FTI) 

□ Yes No 



Reference: 


(CommunicationEnctosing Material) 


Description: □ Original notes re interview of 

fotAn. m i mg P'rtfiils 

JL 




■,jo 
















FD-340 (Rev. 4-11-03) 

File Number 1 byV]^ 

Field Office Acquiring Evidence _ 


Serial # of Originating Document. 
Date Received 0 i.1n)o^ 

From 



(Name of Contributor/Interviewee) 


(Address) 


(City and State) 









To Be Returned □ Yes dKNo 

Receipt Given 0 Yes H3^No 

Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 

□ Yes Ef No 

Federal Taxpayer Information (FTI) 

_ □ Yes _ B'no 

Title 


Reference: 


(Communication Enclosing Material) 



Description: 


Original notes re interview of 











mm 








of -Vo So-\cu^\ GOd .DO. 

I ' ;' 

_ n p&ss^bO- j^aVcluuo • 

1 

, j . ^ ^ __ 

i(0PJ7 " 2 J> Ojl^ (o» OTACuJl. , C.flP£_*. 


pou^p q,mouc| : • com 4 juv4 ^oku-^ 

£cuu^ d OjCCAumsK _ 



(JOKJAiULcJ 


* 8>4^ . Gto\d ijmOsj^'. _ oui"_ _ .bju^ju^L^ 


^_ 

O^caxjfev -^> tiAj/M. 4 





_3>JH 













A ^.okiMa _L* k&A U&z 

.C&np&MM : N<P taoiaMiA L^j- u_#\j 

(X£jt6wd •_ lOKoi ki ua doL^ /?sa 
tUu/vvA. kJjUA) QJ±^ CiUJ*J ._ 



.{UJU pOUj (ktu*. WU£h 


(X^ttK/CLA^^ {& 1i&ju|a^ JqU^aamla-4 


«** 'fci.i.4.fpU&i juum.-.^K 



vvjula 
























295B-BA-108474 ^ 
MPB:mpb 
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2007, by S. 


1 


e following Inves tigation was conducted on May 25, 

at Baltimore, Maryland: 


b6 

b7C 


]was telephonically contacted by 


SA| 

_ Klehr, Harrison, Harvey, Branzburg & Ellers LLP, 260 

South Broad S treet, Philadelphia, PA, 19102, telephone number 

_ regarding the information his law fi rm provided 

pertaining to Aladdin Knowledge Systems, Inc. Mr. 
advised that he is still attempting t o obtain the 


information for the e-mails sent frorr£ 


P address 

] 


He 


advised that Aladdin did test the software and determined that it 
was in fact Vision Numeric's TypeEdit2005 software. 


He provided the following contact information for 
Aladdin employees involved in the purchase and evaluation of the 
software: 




< ^/~7 

S’/3i/cr\ 


OjJ 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE - 

To: Baltimore 

From: Baltimore 

Squad 22 
Contact: SA 


Date: 04/24/2007 


Approved By: 
Drafted By: 




b6 
b7C * 


mpb 


Case ID #-: 295B-BA-n/w 
Title:. ' 


T l. 1 1. 1 1 'I i.1 i jyJlb-SyH 


•3 


] 


ALADDIN KNOWLEDGE SYSTEMS', Ltd. - Victim; 
VISION NUMERIC - Victim; 

I PR - COPYRIGHT INFRINGEMENT - .SOFTWARE ; 
Synopsis.: .Opening, communication. 


Details: 


of KLEHR, HARRISON;,. HARVEY./ BRANZBURG & 


ELLERS LLTT Atcorneys At Law, 260 South PrOed -street, 


b6 

b7C 


PA, telephone number 


sent a .detailed, 


letter to -the. FBI Baltimore Offic e regardi ng; possible criminal 


law firm represents 
ALADDIN is an Israeli 


^^pt y^ri ght . ^in frin gements, activity . 

( ^lan^KnoWledge S ys t e (aladdin 7 ! 
rrianufactu'rer'''c^ JJ ^^tWar^'security devices referred to as 
"dongles." 'These dongles, plug into the USB port of a computer 
and are necessary in order to access specific files of software 
programs legated on that computer. These' dongles are Utilized by 
various companies thro ueho.ut„...the world which publish their own 
proprietary’.sgftwarfe; ^^j£n~^^rg> (VI SION)' is One, of . / 

ALADDIN'S customers that publishes its own software, Type Edit 3, 
that, runs computer-aided engraving technology. 

T his-^letter alleged that; an individual using the e- 


mail addressl__]possibly located in Maryland, 

has engaged.in'the selling Of pirated Type Edit 3 software. 
ALADDIN, used an anon ymous e-mail account to make contact .with 

and purchased the software fo r. 6 600, T hey 


usea we ar er union no transfer money to _ 

MD. The letter indicated tha, 





research u 

ismc 

r www 


living id 


MD. 


and 





source 

and a 


search fod 


On April 24. 2007 


writer conducted an open source 
using google.com. This resulted 















r^-4 t 


To: 
Re: 


Baltimore 



Baltimore 


295B-BA-NEW, 04/24/2007 


in the identification of the websites http://gems.Ocatch.com and 
http://gems.ten.lt. The search also resulted in several 
postings by| to website forums advertising 
software for sale. 


Base upon the aforementioned information, it is 
requested that captioned case be opened and assigned. 


b6 

b7C 


♦♦ 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 05/17/2007 

To: Baltimore 


From: Baltimore 


Squad 22 
Contact: SA 


Approved By: 

Drafted By: 



mpb 


Case ID #: 295B-BA-108474 (I PandingJ ^ 
295B-BA-108474 -FGJ ( Pcndin gH 


Title: |_| 

ALADDIN KNOWLEDGE SYSTEMS, INC. - VICTIM 
VISION NUMERIC - VICTIM; 

IPR - COPYRIGHT INFRINGEMENT - SOFTWARE; 


Synopsis: Case update and opening of Grand Jury sub file. 



It is requested that a Federal Grand Jury (-FGJ) sub 
file be opened. 








FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 07/10/2007 

To: Baltimore 


Prom: Baltimore 



Case ID #: 295B-BA-108474 U u ndinyr " 


Title: | | 

ALADDIN KNOWLEDGE SYSTEMS, Ltd. - Victim; 
VISION NUMERIC - Victim; 

IPR - COPYRIGHT INFRINGEMENT - SOFTWARE; 


Synopsis: Reassignment communication. 


Details: Due to writer's upcoming transfer to the Cleveland 
Division, it is rprnmmpnderi that qaptioned investigation be 
reassigned to SA 


♦♦ 


b6 

b7C 
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b7C 
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2007, by SA 


T he following inves tigation was conducted on July 18, 


jat Baltimore, Maryland: 


SA| | was telephonically contacted by| 

_ Klehr, Harrison, Harvey, Branzburg & Ellers LLP, 260 

South Broad ff hrp.pt Philadelphia, PA, 19102, telephone number 

_ regarding the information his law fi rm provided 

pertaining to Aladdin Knowledge- Systems, Inc. Mr. | 

advised that he w ould be e-mai/1 a file containing the e-mails 

|and Aladdin for the 
The file was encrypted 


b6 

b7C 


exchanged between 
purchase of the co pyrigntea.^soicwargT 
with the password 


f. 


On July 19, 2007, 
reviewed the file. The 
originally provided. The 


SA 


received the e-mail and 
file contained the same e-mails that were 


e-mails were reviewed to determine the 
originating internet protocol address of the e-mails sent by 

T to Aladdin. A review of the full headers for 
these e-mails determ ined that the user of the email 


hide the originating IP address. 


may be using some type of email forwarder to 
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Jun 10 2008 12:50 ^HP LRSERJET FRX 
Jun-10-2003 0B:23w Frw-DLli^ra RECORDS 


<10-333-5142 


T-281 P.002/003 F-022‘ 



U.S, DojmrtmAt at Justice 
Federal Bureau of fciwatigttiaai 


paXflpdy, Pfotsts Safer to 

2600 iiord Baltimore Drive 

mno. 

Baltimore, MD 21244 


June 10, 2008 

Attention: 

Department of Wage Darnings 



Caultt you please check to see if any wage/emplpyweirt^ 
records can be located for the above-named IndiviSSSl^xCrk the states 
of Maryland, Delaware, Pennsylvania, Washing ton/-D.cy,(virginiaJ and 
W. Virginia. The records can. be faxed to {420r"-237-6o'5'3“i—-- 


Thank you. 


W, 


sincere] 


investigative operations Analyst 
Federal Bureau of investigation 
'Bal Mmnrfi Maral atir? 



o)Wg-8A- 10^*47*4 










FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 06/10/2008 


_Sn level I anne was C 

Apartmentj 
servacions were made: 1 


, the vicinity of | | 

Maryland, and the following 


12:20 uvm. - B uilding | 1 is a three story apartment 

building. Apartment | | had flowers and an American flag sign with 
the writing "God Bless America" hanging on the front of the door. 
Additionally, there was a doormat lying at the front door with the 
initial "S". 



File# 295B-BA-108474 Date dictated 



This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned tojonr agency; & t si Ll <? 
it and its contents are not to be distributed outside your agency. . i- l . •£> P" oft- - l&O V * 0 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 06/10/2 008 


Snrvei 11 artce was conducted in the vicinity of 


made: 


Maryland , and the following observations/were (T) J 


b6 

-»b7C 

r 


1 2 ‘ 4 £ n m 


for r hft -i on nf 


Platef 


]and a Ford 


is an end unit townhouse located on 
There was no activity and the door was closed 
surveillance conducted. Parked in front of 

was a Toyota Sienna with Maryland License 
Explorer with a Maryland License Plate 



Investigation on 06/09/2008 

at 

Maryland 

File# 295B-BA-108474 


Date dictated 

by SA 





Q 


This document contains neither recommendations nor conclusions of the FBI. 
it and its contents are not to be distributed outside your agency. 
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It is the property of the FBI and is loaned to your agency; 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 06/10/2008 

Surveillance was conducted in the vicinity of 
Spring Road. Laurel, Maryland , and the following observ 
made: 

1:05 p.m. - 8101 Sandy Spring Road is a three-sto 
office complex with a white and green facade. Suite 220 is 
second floor with a wood front door which was closed at the time 
surveillance was conducted. There appeared to be no noise coming 
from the office building when writer walked by the front door. 

There was a LFR Communications, Inc. sign to the right of the front 
door. 



investigation on 06/09/2008 at Laurel, Maryland 



File# 295B-BA-108474 


Date dictated 



b6 

b7C 


_ /o 
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295B-BA-108474 


JAN: j an 




1 


& 

Surveillance was conducted in the vicinity of 8101 
Sandy Spring Road, Laurel, Maryland, and the following 
observations were made: 

9:05 a.m. - Observed no activity outside of Suite 220. 

The front door was closed at the time surveillance was conducted. 
There appeared to be no noise coming from the office building 
when writer walked by the front door. 
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1 


Snrvpillanrp was in the vicinity of[_ 

Maryland, and the following 


ODservations were made: 



b6 

b7C 


8:34 a.m. - There were no vehicles parked in front of 
the residence due to construction in the parking lot. There was 
no activity at the front door of the residence for the duration 
of surveillance. 


"f: C^'l 



l b2>jounn 

&A - VOS'AT 1 *'- 


b6 | 
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The following investigation was conducted by SA 
at Baltimore, Maryland: 


© 


be 

blC 


1 1 anci al aocnri rmm'horl 

—J date of birEfTX 

L 

-1 j— 

_fwiarvl anrj |J 

<-i f ic i 1 «nm ^ i cpmrri snnmirir mlTnPitfiVI 

/of birth 

-, | date \ 

Maryland j 




A Maryland wage history request on 


indicated 


that his current employer is LFR Communications, Inc. and 
Graphcard.com . 8101 Sandy Spring Road, Suite 220, Laurel, 
Maryland 20707. There was no prior employment listed. 


b6 

b7C 


A Maryland wage history request or)_| 

his current employer is LFR Communications, Inc. 
Graphcard.com, 8101 Sandy Spring Road, Suite 220, 
Maryland 20707. His prior employer was Maryland 
Inc, 6707 Democracy Boulevard, Bethesda, Maryland 


indicated that 
and 

Laurel, 

Virtualogic 

20817. 



-T: CY-i 


lflfrfciM* 04 * »^ s b6 
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FEDERAL B 


OF INVESTIGATION 


Date of transcription 06/18/2008 


|_ I Graphcard.com, Online Payme nt 

Solu tions, 8101 Sahd v Spring Road ; Laurel. Maryland 2p70 7, 
telephone: (30i)/483-95UU, email; | I was 

interviewed at/his place of employment. Alter being advised of the 
identitie s of/t he^anterviewina agents and the nature of the 
interview, [ ^provided the following information: 

_ | |described himself has a _ 

\ Graphcard.com, is an e- J 

commerqe piatrorm ouiit ror internet users without access to 
traditional credit cards to make payments with online. He has been 
in business for four years, has partnered with Fortune 1000 
companies and have signed on more than 1000 partners in 150 
countries. Many of the orders Graphcard.com received are from a 
company in a country overseas that will gather up hundreds of 
orders from buyers and send one order to Graphcard.com with all of 
the sub-orders. These companies will place direct deposits into 
Graphcard.com 1 s Chevy Chase Bank account. 

Many users will have an account with Graphcard.com in 
which they deposit money to cover the cost of the online orders 
placed with Graphcard.com. Graphcard.com also offers pre-paid 
debit cards to be used online. 

Prior to E-Gold going'"out of business, n gave their 
customers the option to haye^E-Gold accounts. He admitted that 
there were a few customers who used Graphcard.com 1 s accounts for 
the wrong reasons, mainly as a way to move money through a middle 
man. 

I_hap never heard of a dongle and was unsu re of its 

uses. When explained the premise jaf—the investigation,_denied 

any involvement in such a scheme. |_pas one gmail accou nt, 



crraphcard@qrriail. com , but has onl y used that account onc e. I I had 
never heard of the email account :l I nor had he ' 


4 ^ 


heard of/the name 


/ Through the use of his SOT, Hat-ahagp. I Ishnwgri t 
there had b een no interactions witi in 
past. | kept a comprehensive database rcr ail past trans 
including all money orders received by him or his employee, 

investigation on 06/11/2008 at Laurel, Maryland_ 


d that 
in the 


File n 29_ 
SA 
by SA 


Date dictated 
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it and its contents are not to be distributed outside your agency. . _. . _ . _ 

-n|bRftPT<>)CY-l »-7LjAtn07.. 361 









V 


FD-302a (Rev. 10-6-95) 


295B-BA-108474 


Continuation of FD-302 of 


■ On 06/ll/2^Cr^.i 


who ^kcis worked for a fo3^ ] [ years, is the 

primary recipie nt of ✓dJl Western Union and/foney orders sent to 
Grap hcard.com. I Inad a r ecord on MarchT^, 2007, of $600.00 wired 
£rom | to ghsv2pay3ggmail.com . These email 

addresses repres ent two different: andnunt-.s that iiF.i 1 i 7S the same 4 
digit pin. believed tjxat it y&s the same user behind both 

accounts. y~~L / / 


The information stored for 


was the 


following 


DOBj_ 

Telephone: 


(the number was missing one' 
digit) 


following: 


The information stored for easv2pav@gmail.com was the 


.ndia 


\ DOB: . 

l CCD *l , I , J 

_ Thejte' was only one^IP addr ess associated with 

| _ Thefe were numerous IP 

' arirlrPBBpq : rfsanci ai-ari uiii Ua— easv ? ^a^@^m ;/ l. com including: 

__| and (last two sub octets unknown). 

There were two additional snrppn ^nampg a.qwnrH with 

easv2pav@gmail. oom:l _ t and 

/it nas neen approximately one year and 
two montns since easv2pav@gmail.com has used Graphcard.com. There 
currently i/s no balance^], eft in the account. After seeing the 
activityythat easv2pav@gmail.com had money wired to his 
Graphcara.com account for fraudulent purposes, he again denied any 
involvement and advised that does not represent his business model. 

|_|stated when they receive money orders, they deposit the money 

to users accounts, and they don't ask questions where the money 
comes from. 

I I advised that around June 2 006, a bank from New Jersey 

contacted him regarding the fraudulent wiring of $1,500.00 from 
their account to his bank account under LFR Communications. He 
stated that happened a few times in which he believed that one of 
his users needed money to pay off their account balances, so they 
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295B-BA-108474 


Continuation of FD-302 of 


,On 06/11/2008 , Page 


fraudu]ently wired him money. Upon learning of this transaction, 
I was contacted by the bank and he returned $1,500.00 to the 
bank. 


In the past. 


lhas been solicited to engage in 


fraudulent a ctivit y, but he continues to actively decline am_ 
involvement. I I advised he would contact the writer or SA| 
if any such solicitation occurs in the future. 
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Case ID #: 295B-BA-108474 
Title: 


jan^\ 

(■ Pending ) 


T 


ALADDIN KNOWLEDGE SYSTEMS, LTD. - Victim; 
VISION NUMERIC - Victim; 

IPR - Copyright Infringement - Software 

Synopsis: To requ est Leoat New Delhi conduct logical 

investigation into | ' 


b6 

b7C 


Details: Details: | | of KLEHR, HARRISON, HARVEY, 

BRANZBURG & ELLERS LLP, Attorneys A t Law. 260 Soy th Broad Street, 


Philadelphia, PA, telephone number 
letter to the FBI Baltimore office 

copyright infringement activity. [_ 

Aladdin Knowledge Systems, Inc. (ALADDIN) 


sent a detailed 
'regardi ng possible criminal 


] law firm represents 

ALADDIN is an Israeli 


manufacturer of software security devices referred to as 
"dongles." These dongles plug into the USB port of a computer 
and are necessary in order to access specific files or software 
programs located on that computer. These dongles are utilized by 
various companies throughout the world which publish their own 
proprietary software. Vision Numeric (VISION) is one of 
ALADDIN'S customers that publishes its own software. Type Edit 3, 
that runs computer-aided engraving technology. 

Th is letter alleged that an individual using the 


b6 

b7C 


e-mail addres 
pirated Type Eldit 3 so ftwareT 
account, [ ~~ 

contact wit 
S600_They 


£ 


_Jengaged in the selling of 

_ ALAD DIN used an anonymous e -mail 

1 email addre ss : | I to make 

and purchased the snft-warp for 


3 


ea,wesrern 
in 


union to 
MD. The 


transfer money td 


letter indicated that open 


and 
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UNCLASSIFIED 


To: New Delhi From: Baltimore 

Re: 295B-BA-108474, 07/14/2008 


source 
and d 


f www.wh itepages. com located both a 
.iving iq | MD. 


Open source searches for| |resulted 

in the identification of websites: http://gems.Ocatch.com and 

http: / / crpm.q . t <^n it_The search also resulted in several postings 

by to website forums advertising software for 

saTST 

_| Graphcard.com, Online Payment 

Solutions, 8101 Sandy Spring Road , Laurel, Maryland 20 707, 
telephone: (301) 483-9500, email:[ was 

interviewed at his place of employment. his company, 
Graphcard.com, is an e-commerce platform built for Internet users 
without access to traditional credit cards to make payments with 
online. Many of the orders Graphcard.com received are from a 
companies in countries overseas that will gather up hundreds of 
orders from buyers and send one order to Graphcard.com with all 
of the sub-orders. Many users will have an account with 
Graphcard.com in which they deposit money to cover the cost of 
the online orders placed with Graphcard.com. 

He admitted that there were a few customers who used 
Graphcard.com's accounts for the wrong reasons, mainly as a way 
to move money through a middle man. 

I q record-on March 9, 2007, of $600.00 wired 

from I to easv2pav@gmail.com . These email 

addresses re presen t two different accounts that utilize the same 
4 digit pin. 1 I believed that it was the same user behind both 
accounts. Write r believes that the us er of easv2pav@gmail.com is 
the same user of | 

The information stored for was 

the following;_ '-' 


Arka nsas, U.S.A. 
DOB: 

Telephone| " 

digit; 


(the number was missing one 


following. 


The information stored for easv2pav@gmail.com was the 
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To: New Delhi From: Baltimore 

Re: 295B-BA-108474, 07/14/2008 


dobTI 

CCD#: 


- There aiaa o n ly one IP addr ess associated with 

_ \ There were numerous IP 

aggresses associated with eeey2nev@crrnail.com including: 

| and | (last two sub octets 

unknown). There wer e two additional screen n ames associated with 
easv2pav@gmail.com:I l and 

I ~~1 It has been approximately one year 

and two months since easv2pav@gmail.com has used Graphcard.com. 
There currently is no balance left in the account. After seeing 
the activity that easv2pav@gmail.com had money wired to his 
Graphcard.com account for fraudulent purposes, he again denied 
any inv olvem ent and advised that does not represent his business 
model. | |stated when they receive money orders, they deposit 

the money to users accounts, and they don't ask questions where 
the money comes from. 

_ The anonymo us account u sed by ALADDI N was 

I with username | | No user account 

was setup bv ATiADDTN at- Graphcard.com with email address: 

1 -1__ It is believed that the user of 

_ ___Uetiin en ad-iar.pnt an count with Graphcard. com 

using email address:_ 

Writer believes that_is very knowledgeable in 

computer systems and is selling counterfeit dongles and possibly 
other computer related techn ology an d equipment in the United 
States. It is believed that | | had $600.00 dollars sent via 

Western TTninn fn an arp ount setup under email address 

_in which he subsequently withdrew that 

money overseas from account easv2pay@gmail.com . 

Baltimore requests Legat New Delhi con duct logical 
investigation on to determine if | | and any other 

associates are involved in the selling of counterfeit dongles and 
possibly other computer related technology. 
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To: New Delhi From: Baltimore 

Re: 295B-BA-108474, 07/14/2008 


LEAD(s): 

Set Lead 1: (Discretionary) 

NEW DELHI 


AT 


INDIA 


Baltim ore requ ests Legat New Delhi co nduct logical 


to determine if[ 


] and any other 


investigation on 

associates are involved in the selling of counterfeit dongles and 
possibly other computer related technology. 


♦♦ 


UNCLASSIFIED 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 07/31/2008 


Graphcard.com, Online Payment 
Solutions') 8101 Sandy Spring 'Roa d, Laurel, Maryland 2 0 707, 


b6 

b7C 


was 


Alter Deing advised of the 


telephone: (301) 483-9500, email:[ 
interviewed at his place of employment. 
identities of t he interviewing agents and the nature of the 
interview, | [provided the following information: 


I I advised he had not come in contact with any 

additional fraud ulent activity since the time of the last interview 

]and[_ 


with SAs[ 


was unaware of any criminal 


(X 


enterprise or major criminal organization that was conducting 
fraudulent activity. He believed that he had limited access to 
such fraudulent activity, but if he came across any such activity 
he would notify writer. 




.. . □ did not believe that Nigerians were using the 

Internet as a means of facilitating fraudulent activity. He 
believed all fraudulent activity was centralized and local and not 
facilitated by talking on blogs or chat rooms. 


b6 

b7C 


| | also did not believe that Nigerians used the Internet 

as a means of facilitating or supporting terrorist activity. He 
advised that Nigerians are not loyal to other organizations, causes 
or groups, and if any money was given to a Nigerian to facilitate 
terrorist activity, that person would probably steal it and use it 
for their own use. 


In the future, | | will begin to document any suspicious 
or criminal activity that he may come in contact with. 


b6 

b7C 


Investigation on 


07/25/2008 at Laurel, Maryland 


File# 295B-BA-108474 

by 


Date dictated 


SA 


SN 




W 


^7 


b6 

b7C 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; 
it and its contents are not to be distributed outside your agency. 
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UNCLASSIFIED 

FEDERAL BUREAU OF INVESTIGATION 


Precedence : ROUTINE 

To: Baltimore 

From: Baltimore 

Squad CY-1 
Contact: SA 


Date: 11/03/2008 


Approved By: 
Drafted By: 




be 

blC 


jan 




- www~ 

Case ID #: 253E-BA-NEW" ( rending ) 

2 9 5B-BA-108474 ( Tending ) 

Title: LFR COMMUNICATIONS,INC. - VICTIM; 

FRAUD - ID THEFT 

Synopsis: To request opening case. 


Details: 


On October 31, 2008, writer met with 


Graphcard.com and LFR Communications Inc., 8101 Sandy 
spring “Road. .Laurel . Mervl an d 20707, telephone,:_L31)l) 483-9500, 


b6 

b7C 


[ 


email: 
his Cl' 


A few days prior, 

riBAJNK account and noticed a withdrawal of $2,500.00, 


logged onto 


] account does not have checking capabilities, and he 


immediately knew that his account was compromised. 


Icontacted CITIBANK who refunded his money and put 


an alert on his account, 

Immediately after □ contacted CITIBANK, he began 
receiving nhnnp calls from people who received fraudulent checks 
under| I company name: LFR Communications, Inc. The majority 


of the people who received these fraudulent checks interacted 
with a buyer on Craig's List, usually with different account 
names. This user contacted the receiver of the fraudulent checks 
and placed a bid to buy what the seller was advertising online. 
Upon agreement of the sale price, a fraudulent check was sent to 
the seller in excess of thousands of dollars. The Craig's List 
buyer instructed the seller to cash the check and wire money via 
Western Union for whatever balance remained after taking the 
price of the purchased item out . The sellers were instruc ted to 
wire money to 


b6 

b7C 


] Salt Lake City, Utah[ 


] 


UNCLASSIFIED 


39-s-£-e/\- io^M i4 -Qt) 












UNCLASSIFIED 





To: Baltimore From: Baltimore 

Re: 253E-BA-NEW, 11/03/2008 


| I received a letter from the Uni ted Sta tes Postal 

Service, Nixie Section, Salt Lake City, Utah I I containing 

loose checks and two printed notes surrounding the checks saying: 

"Hello 

This is the information you are to wire the money to: 


Salt Lake City, UT 


Get back to me the below information as soon as you have the fund 
send: 


Senders First and Last Name with address 
10 Digit MTCN/8 Digit Moneygram Ref Number 
Amount sent 
Pick up time and date 


Email: 


por further instruction 


Email Western Union/Moneygra m information to the shipper via 


b6 

b7C 


b6 

b7C 


Thank you" 


_Thp_rhprk,s_pnrl dspH _i_a_t~h~i ^_Le 

:tter 

PA 


for 

for 





3,950.00 

and 


tn| 


for $3,bOO.00. Vhe fraudulent checks looked legitimate and 
contained legitimate account information. The outside of the 
envelope stated "found loose in mails." 


On October 28, 2008, Chec k Cash ing, Mesa, Arizona, 


telephone (480) 649-8001, contacted 
a check from LFR Communications. IncT 


•rgcrarrH ncr fhp mshina of 


birth: 


for $3,858.82. [ 


zonaf 


, EyL_ 

I Arizona 


] date of 


that sne was an employee of LFR Communications, Inc 
exolsi ne<^ to Check Cashing they had no employ ees in 


told Check__Caahing 


pck Oaffl 


was subsequently arrested,_km: nffirpr 
Mesa Police Department, telephone 
#20083020371. 


Ari 

H i 


rizona. 
ID 


] Police Report 


] 
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UNCLASSIFIED 
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UNCLASSIFIED 


To: Baltimore From: Baltimore 

Re: 253E-BA-NEW, 11/03/2008 


|_|has received approximately 25 phone calls alleging 

they received checks from LFR Communications, Inc. Approximately 
four to five receivers of these fraudulent checks went to their 
banks to cash the checks. All were stopped at their banks. 


I b elieved there are numerous people involved in this 


schema that- arp act-ivp on 


f 


raig's List. On October 30, 2008, 
California received a fraudulent check 


for $7523.00 with instruct ions to wire m oney to 


North Carolina 


This is~a~ 


different name and location of who to wire money to. [ 


Ji 


so 


believed that the person producing the checks is in Salt Lake 
City, Utah were the loose checks were found in the mail. 


assigned. 


Writer recommends captioned case be opened and 


♦♦ 


UNCLASSIFIED 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence : ROUTINE 


Date: 05/23/2009 


To: Baltimore 

From: Baltimore 

Squad CY-1 . 

Contact: SA 


Approved By: 
Drafted By: 


Case ID #: 295B-BA-108474 


Title: 





ALADDIN KNOWLEDGE SYSTEMS, LTD. - Victim; 

VISION NUMERIC - Victim; 

IPR - Copyright Infringement - Software 

Synopsis: To request closing of captioned investigation. 

Details: Request to close captioned case because there is no 

need for further Investigation , A lead was set for Legat New 
Delhi over one year ago and SA has tried on numerous 

occasions to contact and follow-up on the status of the lead, 
however received no response information. Subject information in 
captioned investigation was set in the lead to Legat New Delhi. 

No outstanding leads are open. No evidence was collected in 
captioned case. 


UNCLASSIFIED 


NO PENDING EV'DENCE C/k 


fa 


'fl IlMZA-P-TS.) CV-I 
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INVESTIGATIVE CASE MANAGEMENT 
Collected Items for a Case 


RUN BY 


06/01/2009 
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06/01/09 

08:55:21 


Collected Items for a Case 
Case ID: 295B-BA-108474 
Collected Item Type: All 
Category Type: IB 

Cat/Num Acquired/ Charged Out To/ 

Barcode Office and Storage Location Type Chrged Out Reason 

NO COLLECTED ITEMS FOUND FOR SELECTED REPORT 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE 


Date: 05/27/2009 


To : Baltimore 

From: New Delhi . 

Contact : SA 


Attn: Squad CY-1, SA 


Approved By: 
Drafted By: 


'rsUl.ec) 


Case ID #: 295B-BA-108474 


- n 


Title: |_| 

ALADDIN KNOWLEDGE SYSTEMS, LTD. - Victim; 

VISION NUMERIC - Victim; 

IPR - Copyright Infringement - Software 

Synopsis: To cover lead, 295B-BA-108474, serial 15. 

Details: (U) Even though the Government of India has recently 
made some strides in investigating copyright infringement 
violations. The Indian Central Bureau of Investigation (CBI), 
the primary agency charged with investigating copyright 
infringements, will not diligently investigate these type of 
violations. Furthermore, LEGAT New Delhi is restricted by the 
host country in utilizing investigative tools that it could 
employ to further investigate this lead. 

(U) New Delhi considers this lead covered. 


UNCLASSIFIED 













UNCLASSIFIED 


To: Baltimore From: New Delhi 

Re: 295B-BA-108474, 05/27/2009 


LEAD (s) : 

Set Lead 1: (Discretionary) 

ALL RECEIVING OFFICES 

(U) Read and clear. 


♦♦ 


UNCLASSIFIED 







